This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft File: S6eyT4fqUURtUZr9T-YEGRmOwBI.mft (raw, json) Hash identifier: XpWor5awWRUjeuH80DYfXMpPzI9BtFvXr3KI0+iR02Q= Subject key identifier: B6:7D:C4:FE:3E:C4:1C:55:07:64:8F:76:74:BD:7F:7D:3E:66:9B:E7 Authority key identifier: 4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12 Certificate issuer: /CN=4ba7b24f87ea51446d519afd4fe60419198ec012 Certificate serial: 019AF61CE08D820589C2A29D63D4E7A14FAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 00:01:18 +0000 Manifest this update: Sun 07 Dec 2025 00:01:18 +0000 Manifest next update: Mon 08 Dec 2025 00:01:18 +0000 Files and hashes: 1: S6eyT4fqUURtUZr9T-YEGRmOwBI.crl (hash: lqrChbzgTJ1IBav5F708njksQwQIGi6kCiO4DOIjqe0=) 2: k-8joWHq0IXSAeF06EYlGj2AITA.roa (hash: OrXpbU3ZTRNxide1ly7PEoXo5UOkEqSaVuBCmUkwkxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:e0:8d:82:05:89:c2:a2:9d:63:d4:e7:a1:4f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ba7b24f87ea51446d519afd4fe60419198ec012 Validity Not Before: Dec 7 00:01:18 2025 GMT Not After : Dec 8 00:01:18 2025 GMT Subject: CN=b67dc4fe3ec41c5507648f7674bd7f7d3e669be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a7:09:af:20:b4:8c:f1:a4:a8:ce:cd:48:aa: a5:d5:d2:d0:75:ee:f6:be:05:e6:90:44:31:ea:6a: e7:b0:01:60:95:43:6b:5d:43:3d:63:6a:fe:a8:e8: cd:24:9c:40:0e:31:75:0a:23:2a:06:2b:85:6c:2b: 78:4a:3b:28:d6:2b:67:dd:f6:b5:1e:ad:a0:6b:f3: c7:31:99:8a:f3:84:47:ae:3f:85:2f:7a:59:81:cd: 1e:fc:76:f1:0d:83:c3:f2:2b:3a:fc:14:8e:ce:16: 09:49:f1:05:22:f0:5c:eb:21:db:14:ac:76:ed:28: 4e:ed:76:a9:76:f4:cf:cf:54:90:ba:b8:dc:76:b2: 83:a2:cf:be:86:a5:26:3b:ad:01:5f:12:ea:1d:d4: 2c:5f:29:c7:93:2c:c3:eb:0d:1d:46:a5:d5:65:4e: 43:22:19:2b:1a:58:42:fd:69:40:c9:13:6e:68:7a: 49:63:8e:ab:db:27:18:36:08:d6:38:0e:98:aa:e8: 5c:c3:77:f0:48:65:5e:cf:9f:93:e7:22:56:f4:8a: 8e:0d:c2:ed:9d:6b:91:c3:f4:c3:dc:be:ca:7b:01: f0:f2:e2:db:8e:cf:8d:bb:1c:d3:3a:36:96:80:8a: 91:54:f8:4e:e9:b1:47:e2:b1:fc:22:d1:81:f8:ea: b7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7D:C4:FE:3E:C4:1C:55:07:64:8F:76:74:BD:7F:7D:3E:66:9B:E7 X509v3 Authority Key Identifier: keyid:4B:A7:B2:4F:87:EA:51:44:6D:51:9A:FD:4F:E6:04:19:19:8E:C0:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6eyT4fqUURtUZr9T-YEGRmOwBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31fded-6fde-45ce-b358-a26889ee22c2/1/S6eyT4fqUURtUZr9T-YEGRmOwBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:dc:6f:83:ca:8f:9d:0d:84:ee:19:9c:e5:a9:6e:5d:a3:46: 54:90:55:6f:73:51:07:64:9d:8e:47:a1:06:c7:9f:84:c8:71: 8c:20:c4:eb:7f:9d:88:b8:4a:e8:8a:9d:c9:2e:94:2f:3e:2a: 52:33:05:9d:32:07:f6:7e:6e:12:8e:26:43:05:2c:b8:69:70: 8f:e3:3a:23:79:90:3e:82:c6:98:e3:08:69:27:c1:2e:7b:c0: 59:b6:eb:10:54:6c:c2:ac:66:c7:28:63:d9:e7:51:37:8c:cd: 19:91:50:b4:98:3e:c5:33:70:a3:ef:66:d2:3c:85:75:31:da: 1a:8b:03:f4:f2:af:4e:c7:31:e5:da:1b:98:87:33:06:1e:f8: c2:eb:e2:ec:5e:55:8b:7a:33:24:05:da:3d:aa:bb:59:d9:3b: 12:33:82:47:c6:6c:45:0a:14:00:d7:60:da:b0:2e:82:fb:b6: 16:a5:3f:9d:2d:a1:c0:06:8f:4b:74:04:9c:56:ff:85:4e:de: 1c:3a:75:2c:8c:67:b9:47:ab:bf:0d:de:fb:10:b5:d0:ca:dd: 53:8a:b2:f8:49:43:94:44:46:20:76:b8:d3:a9:52:a2:32:cf: d6:2d:4b:d0:d4:cb:b4:dd:2f:f1:99:71:b3:bb:48:f4:62:da: 06:7d:6d:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HOCNggWJwqKdY9TnoU+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiYTdiMjRmODdlYTUxNDQ2ZDUxOWFmZDRmZTYwNDE5MTk4 ZWMwMTIwHhcNMjUxMjA3MDAwMTE4WhcNMjUxMjA4MDAwMTE4WjAzMTEwLwYDVQQD EyhiNjdkYzRmZTNlYzQxYzU1MDc2NDhmNzY3NGJkN2Y3ZDNlNjY5YmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KcJryC0jPGkqM7NSKql1dLQde72 vgXmkEQx6mrnsAFglUNrXUM9Y2r+qOjNJJxADjF1CiMqBiuFbCt4Sjso1itn3fa1 Hq2ga/PHMZmK84RHrj+FL3pZgc0e/HbxDYPD8is6/BSOzhYJSfEFIvBc6yHbFKx2 7ShO7XapdvTPz1SQurjcdrKDos++hqUmO60BXxLqHdQsXynHkyzD6w0dRqXVZU5D IhkrGlhC/WlAyRNuaHpJY46r2ycYNgjWOA6Yquhcw3fwSGVez5+T5yJW9IqODcLt nWuRw/TD3L7KewHw8uLbjs+NuxzTOjaWgIqRVPhO6bFH4rH8ItGB+Oq3QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZ9xP4+xBxVB2SPdnS9f30+ZpvnMB8GA1UdIwQY MBaAFEunsk+H6lFEbVGa/U/mBBkZjsASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzZleVQ0ZnFVVVJ0VVpyOVQtWUVHUm1Pd0JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zMWZkZWQtNmZkZS00NWNlLWIzNTgt YTI2ODg5ZWUyMmMyLzEvUzZleVQ0ZnFVVVJ0VVpyOVQtWUVHUm1Pd0JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8zMWZkZWQtNmZkZS00NWNlLWIzNTgtYTI2ODg5ZWUyMmMy LzEvUzZleVQ0ZnFVVVJ0VVpyOVQtWUVHUm1Pd0JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdxvg8qP nQ2E7hmc5aluXaNGVJBVb3NRB2SdjkehBsefhMhxjCDE63+diLhK6IqdyS6ULz4q UjMFnTIH9n5uEo4mQwUsuGlwj+M6I3mQPoLGmOMIaSfBLnvAWbbrEFRswqxmxyhj 2edRN4zNGZFQtJg+xTNwo+9m0jyFdTHaGosD9PKvTscx5dobmIczBh74wuvi7F5V i3ozJAXaPaq7Wdk7EjOCR8ZsRQoUANdg2rAugvu2FqU/nS2hwAaPS3QEnFb/hU7e HDp1LIxnuUervw3e+xC10MrdU4qy+ElDlERGIHa406lSojLP1i1L0NTLtN0v8Zlx s7tI9GLaBn1tkg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:44:24 2025 by rpki-client